Secure, well governed and clinically safe by design
UK-hosted and tested every year, with privacy and clinical safety checked in every new feature.
Security
Protected at every layer
UK hosting
Hosted on secure, UK-based Google Cloud servers.
Tested every year
Annual penetration testing, validated externally.
Role-based access
Role-based access controls, with access to patient data limited to named people.
Governance
Privacy and patient safety, built in
Data Protection Officer
Consulted before any new processing, for privacy by design and by default.
Trained every year
Every member of staff completes information governance training each year.
Clinical safety
Managed to DCB0129, with every new feature reviewed by a clinical safety officer.
Standards and frameworks
The standards buyers ask for
The accreditations, frameworks and standards that come up most often in NHS and council tenders.
NHS DSPT
Data Security and Protection Toolkit, submitted each year.
Cyber Essentials Plus
Cyber security controls, independently tested.
DCB0129
Clinical risk management for health IT systems.
DTAC
Meets the NHS Digital Technology Assessment Criteria.
HSCN
Connected to the Health and Social Care Network.
MIG accredited partner
An accredited partner of Healthcare Gateway.
UK GDPR
Compliance overseen by our Data Protection Officer.
HL7 FHIR
Health data passed between systems on FHIR standards.
NICE evidence standards
Our NHS trial was designed to NICE evidence standards.
Need our security documentation?
We’ll share what your IG and IT leads need for their assessment.